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Application.exe code 
Foo( ); // Call Limp_Foo] 



Import Address Table 
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DriverX.sys code 
Foo() // asm Call [_jmp_Foo] 



Import Address Table (IAT) 
_imp_Foo PTR@Foo 
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DriverY.sys code 
Foo() // asm Call [Jmp_Foo] 
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VerifierFoo Proc' 



334 



{ 



// forward to original Foo 
Foo() 
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